MSI UEFI key breach: How safe are YOUR secrets?

OEM OMG: No HSM

Last month’s @MSItweets data theft causing panic: Extremely sensitive signing #keys have been found among the leaked data.

If nothing else, there are important lessons to learn. In this week’s #SSBlogwatch we lock up our secrets.

For @ReversingLabs: https://t.co/QIJL1wXoun

— @Richi 🤓 Jennings (@RiCHi) May 17, 2023

TSA Facial Recognition Pilot Flies Solo at U.S. Airports - Security Boulevard

Your Tinfoil Hat is Under Your Seat: Prepare to have your face scanned at airport security.

:@TSA is piloting a way to match scans of your face with the ID you present at security.

But there are #privacy concerns—are they justified? In today’s #SBBlogwatch, we kick the tires and light the fires.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/4b4S4x3kFi

— @Richi 🤓 Jennings (@RiCHi) May 16, 2023

Microservices Sucks — Amazon Goes Back to Basics - DevOps.com

The moral of the story: Life shrinks or expands in proportion to one’s courage

In #TheLongView: @Amazon @PrimeVideo has ditched its use of #microservices-cum-​#serverless, reverting to a traditional, #monolithic architecture. It vastly improved the workload’s cost and #scalability.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/pGSObEIwSe #DevOps

— @Richi 🤓 Jennings (@RiCHi) May 10, 2023

Red teamers take on AI at DEF CON 31 - ReversingLabs

Near the Tannhäuser Gate:

At @DEFCON 31, #infosec researchers can compete to find vulns in the new generation of #LLM #generativeAI.

From bias, to hallucination and jailbreaks, expect much egg on face. In this week’s #SSBlogwatch we prime for prompt action. For @ReversingLabs: https://t.co/bhxGToJADr

— @Richi 🤓 Jennings (@RiCHi) May 9, 2023

Knives Out for TikTok as Journo Reveals her Spy Story - Security Boulevard

Clock Ticking for U.S. Ban: FT’s Criddle claims ByteDance spied on her—because she wrote damaging stories about TikTok.

Reporter “surveilled” by @TikTok_US staff. Saga left @CristinaCriddle “on edge,” losing sleep and asking, “What is #TikTok?”@ByteDanceTalk denies spying. In today’s #SBBlogwatch, we feel direction wind is blowing. At @TechstrongGroup’s @SecurityBlvd: https://t.co/fx1A8QlLqa

— @Richi 🤓 Jennings (@RiCHi) May 8, 2023